Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/IFEpMz2wo8FeMCVoBBODfosRFi4.roa
File: IFEpMz2wo8FeMCVoBBODfosRFi4.roa (raw, json)
Hash identifier: p4vH79l/bBNU46l20JOOwJp8TbJhzDYQOfY0mfmiXgQ=
Subject key identifier: 20:51:29:33:3D:B0:A3:C1:5E:30:25:68:04:13:83:7E:8B:11:16:2E
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 018CC86F808DF84C1BB9F40D317110919E03
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/IFEpMz2wo8FeMCVoBBODfosRFi4.roa
Signing time: Tue 02 Jan 2024 04:29:59 +0000
ROA not before: Tue 02 Jan 2024 04:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 195.182.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:80:8d:f8:4c:1b:b9:f4:0d:31:71:10:91:9e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 2 04:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=205129333db0a3c15e3025680413837e8b11162e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:de:31:9c:83:d5:d9:1c:73:ee:97:66:88:
21:e7:0d:aa:b0:38:5a:d0:55:c4:12:47:12:27:f2:
24:50:4e:c7:8f:c0:73:97:60:67:ee:45:f1:7d:ae:
87:5e:a2:94:dc:80:ae:df:09:0c:ac:fb:d3:a9:f0:
4f:9b:93:66:2b:b3:3e:73:55:cb:69:59:7c:4a:ad:
ab:44:6f:37:5a:f8:28:9d:e5:05:be:18:a6:fb:0b:
cc:6a:81:d3:fb:c0:c2:29:fe:f4:b9:0f:49:a9:43:
97:93:22:a3:0b:d3:6d:b5:c6:5d:e9:8d:96:36:35:
d5:ba:8f:a7:15:a0:e7:42:0f:13:d4:d1:47:fa:54:
6e:fa:4d:40:96:4f:46:18:6a:58:a5:99:b1:21:ed:
d2:40:75:01:e3:d1:53:02:61:3b:45:a2:d7:d4:af:
31:0d:d8:74:d4:9d:55:26:c0:0d:10:a8:e0:de:73:
d9:b3:b2:eb:0b:1b:e3:e5:04:68:49:89:cc:56:f1:
4c:74:77:f1:5c:ce:ca:b9:db:0d:84:ca:50:44:ae:
38:e0:38:34:aa:2b:06:09:d7:a8:28:60:7f:1e:83:
26:b9:87:06:45:99:6e:d9:df:a1:e1:cb:07:2a:83:
39:7f:77:d7:ff:31:5e:92:0a:c6:6b:70:49:0e:2a:
d8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:51:29:33:3D:B0:A3:C1:5E:30:25:68:04:13:83:7E:8B:11:16:2E
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/IFEpMz2wo8FeMCVoBBODfosRFi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.198.0/24
Signature Algorithm: sha256WithRSAEncryption
22:0c:c1:c0:96:eb:25:fe:ea:f1:c2:40:82:8c:56:52:dc:53:
43:d4:a7:6a:3c:05:a0:2b:a5:fa:88:00:35:a7:9d:f9:41:75:
3b:93:90:da:bd:d1:93:e2:81:20:d3:02:22:ba:9b:51:4a:df:
de:d8:b4:98:02:0a:b8:ec:60:b4:7d:06:64:f0:9a:04:58:b7:
92:d4:03:a8:b2:6a:9c:3f:16:9f:46:cc:09:78:a8:91:eb:73:
d0:bc:69:8e:57:75:d0:98:5a:c1:e3:f1:59:d2:9d:e6:9d:c5:
45:53:b6:02:6b:ee:90:e8:7f:1b:0e:99:fc:e0:8b:3b:6d:09:
52:d5:05:d7:56:b9:8e:01:89:50:3b:56:bf:2f:33:e8:12:7c:
db:ea:51:ce:fe:fe:b9:27:a5:af:47:96:dd:c9:87:f0:19:f6:
7d:b5:ba:f5:86:0b:21:b7:06:af:a5:db:32:4d:e5:32:47:9d:
a3:ad:0b:2c:ba:70:e3:0b:b3:81:bd:c9:e6:93:97:d1:fc:e9:
c7:fb:6f:ba:d1:4a:2c:de:13:d5:80:2f:01:c8:8b:f0:58:7b:
8b:1d:be:f1:a6:8a:bd:eb:02:b2:06:5a:c9:dc:52:9c:5b:4c:
03:eb:8d:bd:76:3c:27:39:17:60:d1:89:ed:c3:d5:88:e0:c0:
b1:88:c2:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb4CN+EwbufQNMXEQkZ4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz
MTk4M2MwHhcNMjQwMTAyMDQyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDUxMjkzMzNkYjBhM2MxNWUzMDI1NjgwNDEzODM3ZThiMTExNjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGDeMZyD1dkcc+6XZogh5w2qsDha
0FXEEkcSJ/IkUE7Hj8Bzl2Bn7kXxfa6HXqKU3ICu3wkMrPvTqfBPm5NmK7M+c1XL
aVl8Sq2rRG83WvgoneUFvhim+wvMaoHT+8DCKf70uQ9JqUOXkyKjC9NttcZd6Y2W
NjXVuo+nFaDnQg8T1NFH+lRu+k1Alk9GGGpYpZmxIe3SQHUB49FTAmE7RaLX1K8x
Ddh01J1VJsANEKjg3nPZs7LrCxvj5QRoSYnMVvFMdHfxXM7KudsNhMpQRK444Dg0
qisGCdeoKGB/HoMmuYcGRZlu2d+h4csHKoM5f3fX/zFekgrGa3BJDirYWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCBRKTM9sKPBXjAlaAQTg36LERYuMB8GA1UdIwQY
MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt
NTlhZTA5ZWRiZWI5LzEvSUZFcE16MndvOEZlTUNWb0JCT0Rmb3NSRmk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5
LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7bGMA0G
CSqGSIb3DQEBCwUAA4IBAQAiDMHAlusl/urxwkCCjFZS3FND1KdqPAWgK6X6iAA1
p535QXU7k5DavdGT4oEg0wIiuptRSt/e2LSYAgq47GC0fQZk8JoEWLeS1AOosmqc
PxafRswJeKiR63PQvGmOV3XQmFrB4/FZ0p3mncVFU7YCa+6Q6H8bDpn84Is7bQlS
1QXXVrmOAYlQO1a/LzPoEnzb6lHO/v65J6WvR5bdyYfwGfZ9tbr1hgshtwavpdsy
TeUyR52jrQssunDjC7OBvcnmk5fR/OnH+2+60Uos3hPVgC8ByIvwWHuLHb7xpoq9
6wKyBlrJ3FKcW0wD6429djwnORdg0Yntw9WI4MCxiMK4
-----END CERTIFICATE-----
Generated at Thu May 2 15:41:20 2024 by rpki-client on console-fra.rpki-client.org